apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: oneimage
  namespace: app-created-namespace
  labels:
    acorn.io/app-name: app-name
    acorn.io/app-namespace: app-namespace
    acorn.io/managed: "true"
    acorn.io/container-name: oneimage
rules:
- apiGroups:
  - bar.io
  resources:
  - foo
  verbs:
  - patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: twoimage
  namespace: app-created-namespace
  labels:
    acorn.io/app-name: app-name
    acorn.io/app-namespace: app-namespace
    acorn.io/managed: "true"
    acorn.io/container-name: twoimage
rules:
- apiGroups:
  - bar.io
  resources:
  - foo
  verbs:
  - patch
